crm.grace-web.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:80:6b:5b:98:e3:58:3d:47:12:23:66:05:41:2e:d3:89:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=crm.grace-web.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:80:6b:5b:98:e3:58:3d:47:12:23:66:05:41:2e:d3:89:e1
Serial Number (int): 392147989688422583984276247733245096200673
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 31:eb:c3:6d:ca:e5:a5:ce:53:22:a2:c0:90:eb:05:f9:37:5e:0d:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): da:7d:39:95:50:0f:c4:34:e2:1c:c7:fc:5a:ec:13:77:bb:72:3f:9b
Fingerprint (sha256): b6:3a:d2:da:dc:48:2d:3c:26:73:37:42:82:e3:43:6b:bb:47:33:8e:db:e9:c4:c9:c8:fc:31:1d:0b:cb:ea:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate crm.grace-web.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm.grace-web.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crm.grace-web.de

Other certificates including the domain name grace-web.de

(limited to 100 certificates)
crm.grace-web.de
piwik.grace-web.de
crm.grace-web.de
crm.grace-web.de
wordpress.grace-web.de
server5.grace-web.de
wordpress.grace-web.de
wordpress.grace-web.de
crm.grace-web.de
crm.grace-web.de
piwik.grace-web.de
crm.grace-web.de
piwik.grace-web.de
crm.grace-web.de
piwik.grace-web.de
crm.grace-web.de
crm.grace-web.de
piwik.grace-web.de
piwik.grace-web.de
crm.grace-web.de
crm.grace-web.de
piwik.grace-web.de
piwik.grace-web.de
piwik.grace-web.de
piwik.grace-web.de
piwik.grace-web.de
piwik.grace-web.de
server5.grace-web.de
piwik.grace-web.de
crm.grace-web.de
piwik.grace-web.de
crm.grace-web.de
wordpress.grace-web.de

Certificate

The complete raw certificate details for crm.grace-web.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhc+Xk1mNGCtpY6L7UbC
7+gnraJTpmGnR5GnW2zOFYDBN5vdoIkzWOA/fGvXu0Y/iamcA4MSmEDTr1DTj5nP
bHvAV1aS247nfeE444qYXLmsKD+L3uaW9VYe/OuAmLID/+Wrv1Z8Bl9Fkb+HvVHM
DblqR1xM0B//vf/QLj97BvXI8sjJ7SnwseLyTwF5nkAoGDombjnc8WxFyHTWu29g
C81hhoXNMiIJnuRP08MQwUeGvV2HAuNPlaqkvkH3FlDJjtiiaPHgrn7tfVXdv93D
Nf0BU47+x875+SRi+MprfGDljCSpuAwbawsqzIwLX7vEnhVoUR3Xu2rVf7p8DwgU
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392147989688422583984276247733245096200673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 15:30:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-22 15:30:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crm.grace-web.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23996739802937817965729595080472940872131537665962570928934346111933798781466626377764434602952718239111752982994332015584100459651183371604819089229712871097475672665392109809084709846367731876936679110306464336804943574256308179571190549270173367383036081424026768058991766450607260305257040644798775401660391917149592345304312480230425615660137018067646120139251881887518734139258206407379552267746012356263290196671403485882748504784259768652011250635854080553624157050288309594157181467837713753799484213410212951553704020013620752825156995775845349697341419908846426044324881339839768530455709489287663882605707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31ebc36dcae5a5ce5322a2c090eb05f9375e0d49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.grace-web.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001710d617dba0000040300473045022013336c6950c66baba602e4020fb398b4d507e4616d14ba0035240539d077fb67022100d806bf41980a55479683b0699505756799fe25b1ecbf69bae33c4c7b0f11a47700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001710d617ddd00000403004730450220417df975c0ba178ea9b6743be619646196fd7eb0783dcdaa6cea9c9602062781022100ea3dc51b528bc9fb26e2c859ab5c423da2727ba6c5bb2cdb241622949aee2ead
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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